Which of the following has the GREATEST impact on the implementation of an information security governance model?

Question

Options

• AOrganizational budget
• BDistance between physical locations
• CNumber of employees
• DComplexity of organizational structure

• A
  6% (2)
• B
  3% (1)
• C
  13% (4)
• D
  77% (24)

Explanation

Organizational structure complexity has the greatest impact because governance models must align with how an organization is actually structured - its hierarchy, decision-making chains, reporting lines, subsidiaries, and divisions. A complex structure demands more intricate policies, controls, and oversight mechanisms, directly shaping how governance is designed and enforced.

Why the distractors fall short:

• A (Budget): Budget constrains what resources can be applied to governance, but it doesn't fundamentally alter the governance model itself - organizations with limited budgets still structure governance the same way, just with fewer tools.
• B (Physical distance): Geographic spread may affect logistics (e.g., remote access policies) but is a secondary factor - a geographically dispersed but simple organization is easier to govern than a co-located but structurally complex one.
• C (Number of employees): Headcount influences scale, not structure. A 10-person company with a complex matrix of subsidiaries is harder to govern than a 10,000-person company with a flat, unified chain of command.

Memory tip: Think of governance as a map of authority and accountability. The more tangled the org chart, the harder it is to draw that map - so organizational structure complexity always wins as the dominant factor.

No community discussion yet for this question.